$ rpki-client -vvf rpki.apnic.net/member_repository/A91278D5/6013216056C811EAB6657A40C4F9AE02/4BCvLhFKSp_VCFvkRmBSE5D7EzE.mft File: 4BCvLhFKSp_VCFvkRmBSE5D7EzE.mft (raw, json) Hash identifier: 1X5pXrmpTqGuTNaz7Hej/3chVtKoIumSn3SqdU1UdT0= Subject key identifier: 1E:4F:1E:48:05:00:A2:50:FB:F4:4E:A8:88:4A:1E:2F:D3:DC:A0:59 Authority key identifier: E0:10:AF:2E:11:4A:4A:9F:D5:08:5B:E4:46:60:52:13:90:FB:13:31 Certificate issuer: /CN=A91278D5/serialNumber=E010AF2E114A4A9FD5085BE44660521390FB1331 Certificate serial: 0AFE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4BCvLhFKSp_VCFvkRmBSE5D7EzE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91278D5/6013216056C811EAB6657A40C4F9AE02/4BCvLhFKSp_VCFvkRmBSE5D7EzE.mft Manifest number: 0ADF Signing time: Fri 22 Aug 2025 19:59:16 +0000 Manifest this update: Fri 22 Aug 2025 19:59:16 +0000 Manifest next update: Fri 29 Aug 2025 19:59:16 +0000 Files and hashes: 1: 4BCvLhFKSp_VCFvkRmBSE5D7EzE.crl (hash: 0/K4jnWDPq+C+JaxJFcaUqVVPLf2f51vhmBCo2Z9PWY=) 2: 19D0C9444D6A11EFB5578F3AC4F9AE02.roa (hash: 0ivrrhOuD8rnlDAlVKRxt/gAlv7oVMt+OxJAV2VhnEQ=) 3: 2BACE2284D6B11EF9595843FC4F9AE02.roa (hash: eJEKTYYjPmJgzHgGsGpnpxLPRqE5UDEGdtp3iWb4OV0=) 4: 76D38708D64611EE98C44371C4F9AE02.roa (hash: Qz146VM4QvlDNRuGBcUC54NXkp571EsnSbuspPg45Lo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91278D5/6013216056C811EAB6657A40C4F9AE02/4BCvLhFKSp_VCFvkRmBSE5D7EzE.crl rsync://rpki.apnic.net/member_repository/A91278D5/6013216056C811EAB6657A40C4F9AE02/4BCvLhFKSp_VCFvkRmBSE5D7EzE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4BCvLhFKSp_VCFvkRmBSE5D7EzE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 19:59:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2814 (0xafe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91278D5, serialNumber=E010AF2E114A4A9FD5085BE44660521390FB1331 Validity Not Before: Aug 22 19:59:16 2025 GMT Not After : Aug 29 19:59:16 2025 GMT Subject: CN=68a8cc14-5787 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:8d:ed:1a:3f:17:1f:13:ce:9b:6f:d0:57:72: 27:22:d3:6a:98:98:d2:13:51:92:d7:5b:33:8a:f3: d6:c4:a5:a1:38:10:b7:fc:f1:5b:3d:2c:d0:a3:85: 22:94:a6:c6:9b:0e:fb:90:19:25:72:e6:c5:d1:0f: c2:10:0c:28:d9:34:a6:e2:14:a4:1c:34:e0:a2:cc: 29:0e:52:e6:37:b9:cf:34:ce:bc:c4:1f:7d:e6:c4: cd:84:33:6b:1b:7d:b0:18:c2:e5:b7:da:51:3a:f9: 2a:83:fb:ec:bd:4b:37:03:03:9c:09:1f:2c:34:d1: b1:bb:bb:29:37:92:7c:5e:5e:f2:d0:88:4b:22:e9: 18:73:a2:a4:f3:87:33:67:0f:7f:97:22:33:a9:14: 93:db:11:db:65:6f:5b:94:3f:48:c8:6b:77:20:ca: 8c:0d:d7:70:a1:3d:2e:3f:e0:4d:f7:80:03:d1:4e: f9:53:b7:6a:8d:56:d6:34:11:b8:45:90:13:81:bf: 21:85:04:e6:35:42:0d:52:17:62:64:d1:00:48:1a: 3a:0c:06:7f:39:11:c9:78:85:2c:17:4b:e0:1c:e1: fc:c1:4f:e6:8a:09:25:df:36:7d:c2:41:56:93:b8: 27:f4:9b:60:e4:61:a8:09:d7:7d:fa:6a:d0:67:69: 4d:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:4F:1E:48:05:00:A2:50:FB:F4:4E:A8:88:4A:1E:2F:D3:DC:A0:59 X509v3 Authority Key Identifier: keyid:E0:10:AF:2E:11:4A:4A:9F:D5:08:5B:E4:46:60:52:13:90:FB:13:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91278D5/6013216056C811EAB6657A40C4F9AE02/4BCvLhFKSp_VCFvkRmBSE5D7EzE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4BCvLhFKSp_VCFvkRmBSE5D7EzE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91278D5/6013216056C811EAB6657A40C4F9AE02/4BCvLhFKSp_VCFvkRmBSE5D7EzE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 44:9a:96:4e:01:80:1b:2f:de:10:43:f3:8f:e0:9c:a0:8c:f2: fa:26:28:92:aa:f5:77:3a:98:93:9b:e5:79:2f:1d:e7:ed:92: e9:ca:13:53:4d:03:2a:15:f8:80:7f:1a:9d:72:2f:0d:6b:34: e6:ed:e8:94:38:94:3d:d9:a3:54:99:b7:77:d4:fc:dd:90:bd: d4:b9:c2:47:10:f0:0b:b6:8a:85:3c:e2:1f:72:f5:e5:72:b7: e8:9f:52:96:07:75:82:f8:2b:99:b9:59:c5:28:f6:a6:81:6f: 6f:10:68:42:5d:d8:3b:0f:ad:72:1b:b7:06:3c:fd:4d:5f:24: 26:3c:d4:c7:d3:3f:ab:d4:aa:a1:c3:71:f9:e8:b5:e5:6a:65: 95:26:2e:bd:ce:81:33:ad:e8:0d:d9:1b:a9:7d:ea:b1:72:ac: da:ad:0c:bc:ae:5a:1f:62:cb:f2:10:2f:4a:be:cf:cd:59:f3: 2c:29:15:0d:12:da:ad:7b:3e:75:1d:b2:0f:ab:e7:10:a1:06: a4:44:44:5a:ad:26:98:b0:b9:76:6d:84:8b:d5:cf:7a:3a:72: ef:83:e8:9f:ae:a6:21:15:5a:f1:cc:46:89:63:71:2e:e0:ab: 04:20:0a:9f:47:d3:bf:93:71:ad:8e:24:7d:6c:e5:e3:77:74: c6:89:bc:7a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCv4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjc4RDUxMTAvBgNVBAUTKEUwMTBBRjJFMTE0QTRBOUZENTA4NUJFNDQ2NjA1MjEz OTBGQjEzMzEwHhcNMjUwODIyMTk1OTE2WhcNMjUwODI5MTk1OTE2WjAYMRYwFAYD VQQDEw02OGE4Y2MxNC01Nzg3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt43tGj8XHxPOm2/QV3InItNqmJjSE1GS11szivPWxKWhOBC3/PFbPSzQo4Ui lKbGmw77kBklcubF0Q/CEAwo2TSm4hSkHDTgoswpDlLmN7nPNM68xB995sTNhDNr G32wGMLlt9pROvkqg/vsvUs3AwOcCR8sNNGxu7spN5J8Xl7y0IhLIukYc6Kk84cz Zw9/lyIzqRST2xHbZW9blD9IyGt3IMqMDddwoT0uP+BN94AD0U75U7dqjVbWNBG4 RZATgb8hhQTmNUINUhdiZNEASBo6DAZ/ORHJeIUsF0vgHOH8wU/migkl3zZ9wkFW k7gn9Jtg5GGoCdd9+mrQZ2lNtQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB5PHkgF AKJQ+/ROqIhKHi/T3KBZMB8GA1UdIwQYMBaAFOAQry4RSkqf1Qhb5EZgUhOQ+xMx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNzhENS82MDEzMjE2MDU2 QzgxMUVBQjY2NTdBNDBDNEY5QUUwMi80QkN2TGhGS1NwX1ZDRnZrUm1CU0U1RDdF ekUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRCQ3ZMaEZLU3BfVkNGdmtSbUJTRTVEN0V6RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NzhENS82MDEzMjE2MDU2QzgxMUVBQjY2NTdBNDBDNEY5QUUwMi80QkN2TGhGS1Nw X1ZDRnZrUm1CU0U1RDdFekUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBEmpZOAYAbL94QQ/OP4JygjPL6JiiSqvV3OpiTm+V5Lx3n7ZLpyhNT TQMqFfiAfxqdci8NazTm7eiUOJQ92aNUmbd31PzdkL3UucJHEPALtoqFPOIfcvXl crfon1KWB3WC+CuZuVnFKPamgW9vEGhCXdg7D61yG7cGPP1NXyQmPNTH0z+r1Kqh w3H56LXlamWVJi69zoEzregN2RupfeqxcqzarQy8rlofYsvyEC9Kvs/NWfMsKRUN Etqtez51HbIPq+cQoQakRERarSaYsLl2bYSL1c96OnLvg+ifrqYhFVrxzEaJY3Eu 4KsEIAqfR9O/k3GtjiR9bOXjd3TGibx6 -----END CERTIFICATE-----Generated at Sat Aug 23 21:33:14 2025 by rpki-client